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WHAT IS CLAIMED IS: 



1 1 . An audit system comprising: 

2 a set of business processes describing the operations of an enterprise; 

3 a subset of the set of business process comprising a set of business functions 

4 assigned to an employee; 

5 a process compatibility registry defining a set of business function 

6 incompatibilities, wherein each business function incompatibility lists at least two business 

7 functions that should not be assigned to the employee; and 

8 an audit manager adapted to compare the each of the set of business function 

9 incompatibilities of the process compatibility registry with the set of business functions 
10 assigned to an employee. 

1 2. The audit system of Claim 1, wherein the audit manager comprises a 

2 report generator adapted to create a report identifying the employee in response to the set of 

3 business functions matching at least one business function incompatibility. 

1 ■ 3. The audit system of Claim 2, wherein the report further includes an 

2 identification of the business function incompatibility matching the set of business functions. 

1 4. The audit system of Claim 1, further comprising a set of workflow- 

2 enabled applications having a set of functions adapted to implement the set of business 

3 processes, such that an assignment of the set of business functions to the employee enables 

4 the employee to access a corresponding subset of functions implementing the set of business 

5 functions, 

1 5. The audit system of Claim 1, further comprising a business process 

2 library having a plurality of business processes, wherein the set of business processes is a 

3 subset of the plurality of business processes of the business process library, 

1 6. The audit system of Claim 5, wherein the business process library 

2 includes a plurality of business function incompatibilities corresponding to at least a portion 

3 of the plurality of business functions, each business function incompatibility listing at least 

4 two business fVmctions that should not be assigned to the employee. 
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1 7. The audit system of Claim 6, wherein the audit manager is adapted to 

2 receive a selection from an auditor designating a business process to be selected from the 

3 business process library and, in response to the selection, add the designated business process 

4 to the set of business processes describing the operations of the enterprise and add at least one 

5 business function incompatibility to the process compatibility registry. 

1 8. The audit system of Claim 1, wherein a new business fimction is 

2 adapted to be assigned to the employee and added to the set of business ftinctions, and the 

3 audit manager is adapted to create an alert in response to the set of business fimctions 

4 matching at least one business fiinction incompatibility. 

1 9. The audit system of Claim 8, wherein the alert is communicated with 

2 an auditor. 

1 10. The audit system of Claim 8, wherein the alert includes an 

2 identification of the employee, 

1 H . The audit system of Claim 8, wherein the alert includes an 

2 identification of the business function incompatibility matching the set of business functions. 

1 12. The audit system of claim 8, wherein the audit manager is adapted to 

2 prevent the assignment of a new business function in response to the set of business functions 

3 matching at least one business function incompatibility. 
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